# CVEs published 2008-05-18 22 CVEs were published on May 18, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-0167](https://cve.now/CVE-2008-0167.md): The write\_array\_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then wr (no CVSS) - [CVE-2008-2281](https://cve.now/CVE-2008-2281.md): Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote a (no CVSS) - [CVE-2008-2282](https://cve.now/CVE-2008-2282.md): admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentication by setting the (no CVSS) - [CVE-2008-2283](https://cve.now/CVE-2008-2283.md): IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveEnhWMF methods in (a) (no CVSS) - [CVE-2008-2284](https://cve.now/CVE-2008-2284.md): PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS) - [CVE-2008-2285](https://cve.now/CVE-2008-2285.md): The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized\_keys lines that contain options, which makes it (no CVSS) - [CVE-2008-2286](https://cve.now/CVE-2008-2286.md): SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers t (no CVSS) - [CVE-2008-2287](https://cve.now/CVE-2008-2287.md): Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local (no CVSS) - [CVE-2008-2288](https://cve.now/CVE-2008-2288.md): Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registr (no CVSS) - [CVE-2008-2289](https://cve.now/CVE-2008-2289.md): Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to (no CVSS) - [CVE-2008-2290](https://cve.now/CVE-2008-2290.md): Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local us (no CVSS) - [CVE-2008-2291](https://cve.now/CVE-2008-2291.md): axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any s (no CVSS) - [CVE-2008-2292](https://cve.now/CVE-2008-2292.md): Buffer overflow in the \_\_snprint\_value function in snmp\_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote (no CVSS) - [CVE-2008-2293](https://cve.now/CVE-2008-2293.md): admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain privileges by setting th (no CVSS) - [CVE-2008-2294](https://cve.now/CVE-2008-2294.md): Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user nam (no CVSS) - [CVE-2008-2295](https://cve.now/CVE-2008-2295.md): Cross-site scripting (XSS) vulnerability in rg\_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remote attackers to injec (no CVSS) - [CVE-2008-2296](https://cve.now/CVE-2008-2296.md): PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code v (no CVSS) - [CVE-2008-2297](https://cve.now/CVE-2008-2297.md): The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "\